82a358f18d
ontoref-derive: #[onto_mcp_tool] attribute macro registers MCP tool unit-structs in
the catalog at link time via inventory::submit!; annotated item is emitted unchanged,
ToolBase/AsyncTool impls stay on the struct. All 34 tools migrated from manual wiring
(net +5: ontoref_list_projects, ontoref_search, ontoref_describe,
ontoref_list_ontology_extensions, ontoref_get_ontology_extension).
validate modes (ADR-018): reads level_hierarchy from workflow.ncl and checks every
.ncl mode for level declared, strategy declared, delegate chain coherent, compose
extends valid. mode resolve <id> shows which hierarchy level handles a mode and why.
--self-test generates synthetic fixtures in a temp dir for CI smoke-testing.
validate run-cargo: two-step Cargo.toml resolution — workspace layout first
(crates/<check.crate>/Cargo.toml), single-crate fallback by package name or repo
basename. Lets the same ADR constraint shape apply to workspace and single-crate repos.
ontology/schemas/manifest.ncl: registry_topology_type contract — multi-registry
coordination, push targets, participant scopes, per-namespace capability.
reflection/requirements/base.ncl: oras ≥1.2.0, cosign ≥2.0.0, sops ≥3.9.0, age
≥1.1.0, restic declared as Hard/Soft requirements with version_min, check_cmd, and
install_hint (ADR-017 toolchain surface).
ADR-019: per-file recipient routing for tenant isolation without multi-vault. Schema
additions: sops.recipient_groups + sops.recipient_rules in ontoref-project.ncl.
secrets-bootstrap generates .sops.yaml from project.ncl in declarative mode. Three
new secrets-audit checks: recipient-routing-coherent, recipient-routing-coverage,
no-multi-vault. Adoption templates: single-team/, multi-tenant/, agent-first/.
Integration templates: domain-producer/, mode-producer/, mode-consumer/.
UI: project_picker surfaces registry badge (⟳ participant) and vault badge
(⛁ vault_id · N, green=declarative / amber=legacy) per project card. Expanded panel
adds collapsible Registry section with namespace, endpoint, and push/pull capability.
manage.html gains Runtime Services card — MCP and GraphQL toggleable without restart
via HTMX POST /ui/manage/services/{service}/toggle.
describe.nu: capabilities JSON includes registry_topology and vault_state per project.
sync.nu: drift check extended to detect //! absence on newly registered crates.
qa.ncl: six entries — credential-vault-best-practice (layered data-flow diagram),
credential-vault-templates (paths A/B/C), credential-vault-troubleshooting (15 named
errors), integration-what-and-why (ADR-042 OCI federation), integration-how-to-implement,
integration-troubleshooting.
on+re: core.ncl + manifest.ncl updated to reflect OCI, MCP, and mode-hierarchy nodes.
Deleted stale presentation assets (2026-02 slides + voice notes).
96 lines
2.3 KiB
TOML
96 lines
2.3 KiB
TOML
# Generated by dev-system/ci
|
|
# Cargo configuration for build and compilation settings
|
|
|
|
[build]
|
|
# Number of parallel jobs for compilation
|
|
jobs = 4
|
|
target-dir = "/Volumes/Devel/ontoref/target"
|
|
|
|
# Code generation backend
|
|
# codegen-backend = "llvm"
|
|
|
|
[profile.dev]
|
|
# Development profile - fast compilation, debug info
|
|
opt-level = 0
|
|
debug = true
|
|
debug-assertions = true
|
|
overflow-checks = true
|
|
lto = false
|
|
panic = "unwind"
|
|
incremental = true
|
|
|
|
[profile.clippy]
|
|
# Lint-only profile: no debug info, no codegen — clippy only needs MIR/HIR.
|
|
# Used by pre-commit to avoid bloating target/debug with DWARF/dSYM artifacts.
|
|
inherits = "dev"
|
|
debug = 0
|
|
incremental = true
|
|
|
|
[profile.release]
|
|
# Release profile - slow compilation, optimized binary
|
|
opt-level = 3
|
|
debug = false
|
|
debug-assertions = false
|
|
overflow-checks = false
|
|
lto = "thin"
|
|
codegen-units = 1
|
|
panic = "abort"
|
|
incremental = false
|
|
strip = false
|
|
|
|
[profile.test]
|
|
# Test profile - inherits from dev but can be optimized
|
|
opt-level = 1
|
|
debug = true
|
|
debug-assertions = true
|
|
overflow-checks = true
|
|
lto = false
|
|
incremental = true
|
|
|
|
[profile.ci-test]
|
|
# Pre-commit profile: no debug info, no incremental.
|
|
# Shared by rust-test and docs-links hooks so both reuse the same .rlib artifacts.
|
|
# debug = 0 removes DWARF/dSYM — halves binary size without affecting correctness.
|
|
inherits = "test"
|
|
debug = 0
|
|
incremental = false
|
|
|
|
[profile.ci]
|
|
# CI pipeline profile: line-tables-only debug for useful backtraces on remote failures.
|
|
# Distinct from ci-test (debug=0): CI failures must show file:line to be actionable.
|
|
inherits = "test"
|
|
debug = "line-tables-only"
|
|
incremental = false
|
|
|
|
[profile.bench]
|
|
# Benchmark profile - same as release
|
|
opt-level = 3
|
|
debug = false
|
|
debug-assertions = false
|
|
overflow-checks = false
|
|
lto = "thin"
|
|
codegen-units = 1
|
|
incremental = false
|
|
|
|
[term]
|
|
# Terminal colors
|
|
color = "auto"
|
|
verbose = false
|
|
progress.when = "auto"
|
|
progress.width = 80
|
|
|
|
[net]
|
|
# Network settings
|
|
git-fetch-with-cli = true
|
|
offline = false
|
|
|
|
# Strict version requirements for dependencies
|
|
# force-non-semver-pre = true
|
|
|
|
[alias]
|
|
# Custom cargo commands
|
|
build-all = "build --all-targets"
|
|
check-all = "check --all-targets --all-features"
|
|
test-all = "test --all-features --workspace"
|
|
doc-all = "doc --all-features --no-deps --open"
|
|
doc-json = "doc --no-deps -- -Z unstable-options --output-format json"
|